CVE-2010-4770

no score yetEPSS 1.0%

commodityrentals dvd rentals script: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2011-03-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

commodityrentals:dvd_rentals_script

References

http://packetstormsecurity.org/files/view/96010/dvdrental-sql.txt
http://secunia.com/advisories/42330
http://securityreason.com/securityalert/8159
http://www.exploit-db.com/exploits/15578
http://www.securityfocus.com/bid/44988

Check your stack JSON